2159 Commits

Author SHA1 Message Date
Bruce Po
8b5c7dbb93 Merge "selinux move aocx from vndservice to service" into main 2024-06-04 23:30:43 +00:00
Richard Chou
8b602f29a6 Merge "Recorder: add sepolicy for Google Recorder app" into main 2024-06-04 07:55:02 +00:00
Richard Chou
7d60dc41df Recorder: add sepolicy for Google Recorder app
List of avc-denies:
http://b/338879856#comment3

Test: build pass
Bug: 338879856
Change-Id: I40884f0308f8a77b237c6b588db861b63950a8d8
2024-06-04 14:57:11 +08:00
Wayne Lin
2ced5f6958 gps: maintain one solution
Move the rules from ag/26254728

Bug: 315915958
Test: build pass and GPS function works
Change-Id: I730a7af2b8456ae4a350dbd0d6bdbfe7d3484b18
2024-06-03 08:35:41 +00:00
Jaegeuk Kim
85ff832530 Merge "Change rq_affinity of the zoned storage logical unit from one into two" into main 2024-06-01 02:22:49 +00:00
Bruce Po
1f7c89e359 selinux move aocx from vndservice to service
When updating aocx service to use binder ndk backend, we get this
selinux violation:

SELinux : avc:  denied  { add } for pid=2772 uid=0 name=aocx.IAocx scontext=u:r:aocxd:s0 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=0

TEST:
adb push out/target/product/tangorpro/vendor/etc/selinux/* /vendor/etc/selinux
adb reboot
adb shell aocx_tool list

BUG: 343998265
Change-Id: I1e4f554abfe02f33328c851f7da64c671d8f4cb7
2024-05-31 12:42:10 -07:00
Klines Jiang
65a5fe99c1 [SELinux] Initial access fingerprint sepolicy for gyotaku_app
Initial a specific build folder for fingerprint, we need to include the mk file on specific build.

Bug: 342335081

Test: Local build and sepolicy tests passed.
Change-Id: I8b8522ed949abc586ebab2efe4061f5e4b6cdde0
2024-05-31 10:03:46 +00:00
Treehugger Robot
e92cc2f8b1 Merge "Add the new IPC and ring buffer files." into main 2024-05-31 08:45:20 +00:00
Madhav Iyengar
ea854a89c4 Add the new IPC and ring buffer files.
Adds file_contexts entries for the files representing new AOC services
used by a new transport between CHRE on AOC and the bthal.

NOTE: The use-case for these files is the same as the
/dev/acd-com.google.bt* files (lines 23-24). Those files will eventually
be removed when we migrate from the old USF-based transport to the one
under development.

Bug: 342415506
Test: Works with other CLs in topic to support BT offload over the new
transport (with a local change to hook the new transport in).

Change-Id: I81246a25af020ab14da3d4ae7675f2a0f00f97be
2024-05-31 02:04:54 +00:00
Bart Van Assche
41836d64ce Change rq_affinity of the zoned storage logical unit from one into two
Bug: 335708738
Flag: EXEMPT This change only affects ZUFS devices
Change-Id: I3bb655856f0c27a42f26c6dd1a8fc53e7f6e1a00
Signed-off-by: Bart Van Assche <bvanassche@google.com>
2024-05-30 12:59:57 -07:00
Rios Kao
8e0546449d Merge "audio: add a restricted property for audio app." into main 2024-05-30 03:38:36 +00:00
Randall Huang
1a4ff9675f Merge "Allow userdata_exp partitions" into main 2024-05-30 02:45:44 +00:00
Xin Li
1b583f2977 Merge "[automerger skipped] Merge Android 24Q2 Release (ab/11526283) to aosp-main-future am: ef6bdc1f33 -s ours" into main 2024-05-29 21:39:03 +00:00
Xin Li
2ff078405b [automerger skipped] Merge Android 24Q2 Release (ab/11526283) to aosp-main-future am: ef6bdc1f33 -s ours
am skip reason: Merged-In I4ac1ecf51da01c24d4e2f0f7e52df1d2cb92e275 with SHA-1 1c9e011597 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/27272614

Change-Id: I1579bc2c16412fe5a1c24f5b7f7f59992df9f33e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 20:48:58 +00:00
Xin Li
2ef9a3bb11 [automerger skipped] Merge Android 24Q2 Release (ab/11526283) to aosp-main-future am: ef6bdc1f33 -s ours
am skip reason: Merged-In I4ac1ecf51da01c24d4e2f0f7e52df1d2cb92e275 with SHA-1 1c9e011597 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/27272614

Change-Id: I7538e4b3033f31f59467d2c6a795c93b0d722542
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 19:44:39 +00:00
Michelle Ho
65df448851 [automerger skipped] Foldable concurrent selfie prebuilt flag am: 3297aee549 -s ours
am skip reason: Merged-In Idbacff0d8f97ad0047b334d5563c7e4d5d734182 with SHA-1 fd7d393907 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/27394639

Change-Id: I6cb3b05560601c39ca3d2bd90fd56da0ea0f9c61
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-29 04:13:48 +00:00
Rios Kao
92a659256f audio: add a restricted property for audio app.
note: For app layer to access specific property,
      define persist.vendor.app.audio. and
      set it as restricted.

Test: build pass
Bug: 333497194

Change-Id: I397a1bcb9bd16c7fa236049eead30b6e17a996b5
2024-05-29 02:48:30 +00:00
Treehugger Robot
dd9070f67f Merge "Foldable concurrent selfie prebuilt flag" into main 2024-05-29 00:30:48 +00:00
Michelle Ho
fd7d393907 Foldable concurrent selfie prebuilt flag
Add a foldable concurrent selfie prebuilt
XML as the feature flag config file

Flag: com.google.pixel.camera.concurrent_foldable_dual_front
Bug: 333986739
Test: build pass
Change-Id: Idbacff0d8f97ad0047b334d5563c7e4d5d734182
2024-05-28 03:29:46 +00:00
Michelle Ho
3297aee549 Foldable concurrent selfie prebuilt flag
Add a foldable concurrent selfie prebuilt
XML as the feature flag config file

Bug: 333986739
Test: build pass
Change-Id: Idbacff0d8f97ad0047b334d5563c7e4d5d734182
Merged-In: Idbacff0d8f97ad0047b334d5563c7e4d5d734182
2024-05-27 16:15:38 +00:00
Vic Huang
d94cfccb71 [BT] Add sepolicy of power stats
Bug: 341652267
Test: Local build and test pass
Change-Id: Ie3acff612c1f46e403d9b5b8047b6b2666fb1bde
2024-05-27 09:14:28 +00:00
Treehugger Robot
fe5a740e69 Merge "Create an isolated copy of vendor dumpstate from all devices" into main 2024-05-27 04:35:50 +00:00
Xin Li
ef6bdc1f33 Merge Android 24Q2 Release (ab/11526283) to aosp-main-future
Bug: 337098550
Merged-In: I4ac1ecf51da01c24d4e2f0f7e52df1d2cb92e275
Change-Id: I436cedecd5c6eb58f03fc239c520070163d49b8f
2024-05-24 08:25:22 -07:00
Cyan_Hsieh
4434df4420 Add MK_OWNERS as owners file for makefile am: 82a8451d2a am: 127be6aaff
Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/3102997

Change-Id: I61f3ea0556475b30f148eca5a867f66ca7b6520c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-24 09:10:36 +00:00
Cyan_Hsieh
127be6aaff Add MK_OWNERS as owners file for makefile am: 82a8451d2a
Original change: https://android-review.googlesource.com/c/device/google/gs-common/+/3102997

Change-Id: I8afc931b8b3639a47b912020f214c6e15ea14e54
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-24 08:46:18 +00:00
Cyan_Hsieh
82a8451d2a Add MK_OWNERS as owners file for makefile
Bug: 278167548
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:719071202775f584b02c313172b15496045009d8)
Merged-In: I9c1ac31c640c9f74434b993c9cc24332d6820cd0
Change-Id: I9c1ac31c640c9f74434b993c9cc24332d6820cd0
2024-05-24 08:01:37 +00:00
Jaegeuk Kim
24ee023597 Allow userdata_exp partitions
Bug: 336319772
Change-Id: I7f878f29d356df3992fb49b9df8f8a900a6f12b8
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2024-05-22 13:31:39 -07:00
Adam Shih
3cd2c9ae0d Create an isolated copy of vendor dumpstate from all devices
Bug: 326153087
Test: make android.hardware.dumpstate-service on husky and cheetah
target without breaking

Change-Id: I9053d813e4be75ac279beeec77fdcefed08396f9
2024-05-20 01:59:27 +00:00
YiKai Peng
2b710d7dbb sepolicy: allow hal_wlcservice call
Bug: 341014314
Bug: 341220409
Test: SELinuxUncheckedDenialBootTest
Change-Id: I843c3be8c13d183174e87222b0f067bf98aad57d
Signed-off-by: YiKai Peng <kenpeng@google.com>
2024-05-19 13:34:15 +00:00
YiKai Peng
24af2c95b1 Reapply "WLC: service: add configuration and contexts for sepolicy"
This reverts commit 7d99cb87ea21af55d699a319462f9999f960f302.

Bug: 311315038
Test: authentication
Change-Id: Iaf8d4043794f895ce9ce1ab9b295de072de16e50
2024-05-18 15:11:40 +00:00
Priyanka Advani
5926313576 Merge "Revert "WLC: service: add configuration and contexts for sepolicy"" into main 2024-05-17 23:57:30 +00:00
Priyanka Advani
7d99cb87ea Revert "WLC: service: add configuration and contexts for sepolicy"
Revert submission 27233359-wlcservice-main

Reason for revert: Droidmonitor triggered revert due to b/341014314. Test is still flaky on all devices except akita. Will be verifying through ABTD before submission.

Reverted changes: /q/submissionid:27233359-wlcservice-main

Change-Id: Idf2749208a361c14ebac92ad221cc2599fc8135e
2024-05-17 20:35:55 +00:00
Hongyang Jiao
aebd22a825 Remove BetterBug (and BetterBugStub) from aosp & factory build targets. am: db7b681039
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/27350056

Change-Id: I9654dffa12d9e1c23f8f523a6753b8d48a9cd3b0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-17 04:11:46 +00:00
YiKai Peng
d1a07d0197 Merge "WLC: service: add configuration and contexts for sepolicy" into main 2024-05-16 06:41:52 +00:00
Feiyu Chen
ff3b853a7e Merge "Add missing SEPolicy for audio HAL to use EdgeTpu lib" into main 2024-05-15 21:32:54 +00:00
feiyuchen
93c25dcb0d Add missing SEPolicy for audio HAL to use EdgeTpu lib
Some policies were missing. This CL adds them.

Bug: 340369535
Test: Default presubmit. To be tested on device
Change-Id: I8a124d644906ffc622598ac0bf6079d704197a33
2024-05-15 18:08:31 +00:00
Hongyang Jiao
db7b681039 Remove BetterBug (and BetterBugStub) from aosp & factory build targets.
Bug:340172938
Change-Id: I82fc888497b23b9537f06f1727511608cb1e8ec8
Test: Manual
2024-05-15 06:50:55 +00:00
Midas Chien
cd14b2ad4d Dump bts information am: 15538c9845
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/27232582

Change-Id: I07bcaf815b664ab36a17eb19bd5c1ae6238685e2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-15 02:16:45 +00:00
Midas Chien
15538c9845 Dump bts information
Get BTS information when capturing bugreport.

Bug: 335422086
Test: capture bugreport
Change-Id: I5ae9be35a3fc3c975ccc843e9daee6d4e0ac130a
2024-05-14 07:40:58 +00:00
Treehugger Robot
12d68d3ff0 Merge "sepolicy: allow hal_gnss_pixel create fifo node" into main 2024-05-13 08:09:14 +00:00
Dinesh Yadav
6c1885ee19 Merge "Limit maxGxpDebugDumps to 4" into main 2024-05-10 13:43:19 +00:00
Cheng Chang
84fdceb8b4 sepolicy: allow hal_gnss_pixel create fifo node
avc:  denied  { read } for  name="u:object_r:vendor_chre_hal_prop:s0" dev="tmpfs" ino=401 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_chre_hal_prop:s0 tclass=file
avc:  denied  { find } for pid=900 uid=1021 name=android.hardware.contexthub.IContextHub/default scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:hal_contexthub_service:s0 tclass=service_manager
avc:  denied  { call } for  scontext=u:r:hal_gnss_pixel:s0 tcontext=u:r:hal_contexthub_default:s0 tclass=binder
avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder
avc:  denied  { search } for  name="gps" dev="dm-54" ino=380 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc:  denied  { write } for  name="gps" dev="dm-54" ino=380 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc:  denied  { add_name } for  name=".pps_pipe" scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc:  denied  { create } for  name=".pps_pipe" scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
avc:  denied  { read } for  name=".pps_pipe" dev="dm-54" ino=11418 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
avc:  denied  { open } for  path="/data/vendor/gps/.pps_pipe" dev="dm-54" ino=11418 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file permissive=1
avc:  denied  { write } for  name=".pps_pipe" dev="dm-54" ino=11418 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
avc:  denied  { search } for  name="gps" dev="dm-49" ino=380 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc:  denied  { write } for  name=".ppspipe" dev="dm-49" ino=18610 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
avc:  denied  { write } for  name="gps" dev="dm-54" ino=380 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc:  denied  { open } for  path="/data/vendor/gps/.ppspipe" dev="dm-49" ino=18610 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file
avc:  denied  { remove_name } for  name=".pps_pipe" dev="dm-54" ino=11712 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=dir
avc:  denied  { unlink } for  name=".pps_pipe" dev="dm-59" ino=6600 scontext=u:r:hal_gnss_pixel:s0 tcontext=u:object_r:vendor_gps_file:s0 tclass=fifo_file

Bug: 339391267
Test: Verified the boot health at b/339391267#comment21.
Test: Verified the boot health at b/339391267#comment22.
Change-Id: I9f0b0939aa2bc3af0049067edaa17bc507be9fe7
2024-05-10 09:42:14 +00:00
Treehugger Robot
62056d470e Merge "Add a different implementation of insmod.sh" into main 2024-05-10 02:41:11 +00:00
Martin Liu
d400630a10 allow powerhal to access PA_KILL knobs am: 2522590c40
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/27256041

Change-Id: I1e2ae9ee0b8e1744d3be313645c496947b76e7a1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2024-05-10 02:00:29 +00:00
Kelvin Zhang
99f848ed48 Add a different implementation of insmod.sh
Use soong namespace to branch a implementation of insmod.sh .
The newly added implementation is only added to PRODUCT_PACKAGE
for dev option enabled devices. The only change to the script is
skip loading kernel modules from vendor|system_dlkm when under 16K
mode.

Test: Dev option works
Bug: 319335586

This reverts commit 11eb02562d7e89037c67f5a22a142b110b303a30.

Change-Id: I5f5d4ee79be7f872ec321e93f58f6516974d0cad
2024-05-09 09:46:55 -07:00
Feiyu Chen
5ca6b7496d Merge "Add SELinux policy for apps to use Tachyon lib" into main 2024-05-09 16:19:57 +00:00
Achigo Liu
ea3763c1c4 Merge "Revert "Add a different implementation of insmod.sh"" into main 2024-05-09 15:58:31 +00:00
Juan Yescas
11eb02562d Revert "Add a different implementation of insmod.sh"
This reverts commit 60cc378f185e75899c62dc97c7fc3a55856525eb.

Reason for revert: thermal-service.pixel native crash many times

Bug: 339337171
Change-Id: Ibd228ea6a0950c2ff8449f7fd55a405fe9a0a99f
2024-05-09 13:24:05 +00:00
nischaljain
2dbfad9f6f Limit maxGxpDebugDumps to 4
DSP multicore workload can run atmost on 4 cores(in case of
amalthea) thus in case of crash we will need atmost 4 core
dumps. Thus limiting maxGxpDebugDumps to 4 to make sure that
we will be capturing all the required core dumps for the
recent crash and at the same time not inflating the bugreport
size.

Bug: 338583087
Change-Id: I76c5b1199c0d89f2bd9a2720dc24a7c86d057b4c
2024-05-09 12:33:01 +00:00
feiyuchen
12b799b125 Add SELinux policy for apps to use Tachyon lib
Bug: 339133130
Test: Verified apps can now open Tachyon client lib
Change-Id: I8ca9f08517ae8fc1deb5f97ce2823cd5eb5fafb6
2024-05-08 18:48:03 +00:00